Сегодня рассмотрим как защитить порты докера от доступа из интернета при помощи фаервола. Конечно настройка будет происходить при помощи iptables.
gsm_open port /dev/ttyUSB2, NOT open
Сразу после установки fusionpbx выловил ошибку при попытке настроить модуль gsm_open. как всегда поисковики не дали ответа. решение простое: добавить разрешение. В моём случае я добавил пользователя www-data в группу dialout лог ошибки:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 |
2025-05-25 20:32:05.343306 0.00% [DEBUG] mod_gsmopen.cpp:1143 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1143 ][none ][-1,-1,-1] Default globals.dialplan=XML 2025-05-25 20:32:05.343348 0.00% [DEBUG] mod_gsmopen.cpp:1145 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1145 ][none ][-1,-1,-1] Default globals.destination=5000 2025-05-25 20:32:05.343354 0.00% [DEBUG] mod_gsmopen.cpp:1147 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1147 ][none ][-1,-1,-1] Default globals.context=default 2025-05-25 20:32:05.343361 0.00% [DEBUG] mod_gsmopen.cpp:1155 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1155 ][none ][-1,-1,-1] globals.debug=0 2025-05-25 20:32:05.343366 0.00% [DEBUG] mod_gsmopen.cpp:1157 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1157 ][none ][-1,-1,-1] globals.debug=8 2025-05-25 20:32:05.343372 0.00% [DEBUG] mod_gsmopen.cpp:1163 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1163 ][none ][-1,-1,-1] globals.dialplan=XML 2025-05-25 20:32:05.343380 0.00% [DEBUG] mod_gsmopen.cpp:1169 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1169 ][none ][-1,-1,-1] globals.context=default 2025-05-25 20:32:05.343386 0.00% [DEBUG] mod_gsmopen.cpp:1160 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1160 ][none ][-1,-1,-1] globals.hold_music= 2025-05-25 20:32:05.343391 0.00% [DEBUG] mod_gsmopen.cpp:1166 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1166 ][none ][-1,-1,-1] globals.destination=9999 2025-05-25 20:32:05.343468 0.00% [DEBUG] gsmopen_protocol.cpp:3113 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 3113 ][none ][-1,-1,-1] setting boost 0 to 512.000000 2025-05-25 20:32:05.343481 0.00% [DEBUG] gsmopen_protocol.cpp:3113 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 3113 ][none ][-1,-1,-1] setting boost 0 to 512.000000 2025-05-25 20:32:05.352513 0.00% [ERR] mod_gsmopen.cpp:3225 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][ERRORA 3225 ][none ][-1,-1,-1] port /dev/ttyUSB5, NOT open 2025-05-25 20:32:05.352585 0.00% [NOTICE] mod_gsmopen.cpp:3243 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3243 ][none ][-1,-1,-1] ************************************************ 2025-05-25 20:32:05.352594 0.00% [NOTICE] mod_gsmopen.cpp:3244 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3244 ][none ][-1,-1,-1] f.imei=|| 2025-05-25 20:32:05.352602 0.00% [NOTICE] mod_gsmopen.cpp:3245 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3245 ][none ][-1,-1,-1] f.imsi=|| 2025-05-25 20:32:05.352609 0.00% [NOTICE] mod_gsmopen.cpp:3246 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3246 ][none ][-1,-1,-1] f.tty_data_device = |/dev/ttyUSB5| 2025-05-25 20:32:05.352616 0.00% [NOTICE] mod_gsmopen.cpp:3247 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3247 ][none ][-1,-1,-1] f.tty_audio_device = |/dev/ttyUSB4| 2025-05-25 20:32:05.352623 0.00% [NOTICE] mod_gsmopen.cpp:3248 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3248 ][none ][-1,-1,-1] ************************************************ 2025-05-25 20:32:05.354492 0.00% [ERR] mod_gsmopen.cpp:3225 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][ERRORA 3225 ][none ][-1,-1,-1] port /dev/ttyUSB8, NOT open 2025-05-25 20:32:05.354542 0.00% [NOTICE] mod_gsmopen.cpp:3243 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3243 ][none ][-1,-1,-1] ************************************************ 2025-05-25 20:32:05.354550 0.00% [NOTICE] mod_gsmopen.cpp:3244 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3244 ][none ][-1,-1,-1] f.imei=|| 2025-05-25 20:32:05.354557 0.00% [NOTICE] mod_gsmopen.cpp:3245 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3245 ][none ][-1,-1,-1] f.imsi=|| 2025-05-25 20:32:05.354564 0.00% [NOTICE] mod_gsmopen.cpp:3246 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3246 ][none ][-1,-1,-1] f.tty_data_device = |/dev/ttyUSB8| 2025-05-25 20:32:05.354571 0.00% [NOTICE] mod_gsmopen.cpp:3247 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3247 ][none ][-1,-1,-1] f.tty_audio_device = |/dev/ttyUSB7| 2025-05-25 20:32:05.354578 0.00% [NOTICE] mod_gsmopen.cpp:3248 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3248 ][none ][-1,-1,-1] ************************************************ 2025-05-25 20:32:05.356612 0.00% [ERR] mod_gsmopen.cpp:3225 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][ERRORA 3225 ][none ][-1,-1,-1] port /dev/ttyUSB2, NOT open 2025-05-25 20:32:05.356685 0.00% [NOTICE] mod_gsmopen.cpp:3243 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3243 ][none ][-1,-1,-1] ************************************************ 2025-05-25 20:32:05.356696 0.00% [NOTICE] mod_gsmopen.cpp:3244 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3244 ][none ][-1,-1,-1] f.imei=|| 2025-05-25 20:32:05.356703 0.00% [NOTICE] mod_gsmopen.cpp:3245 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3245 ][none ][-1,-1,-1] f.imsi=|| 2025-05-25 20:32:05.356710 0.00% [NOTICE] mod_gsmopen.cpp:3246 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3246 ][none ][-1,-1,-1] f.tty_data_device = |/dev/ttyUSB2| 2025-05-25 20:32:05.356717 0.00% [NOTICE] mod_gsmopen.cpp:3247 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3247 ][none ][-1,-1,-1] f.tty_audio_device = |/dev/ttyUSB1| 2025-05-25 20:32:05.356724 0.00% [NOTICE] mod_gsmopen.cpp:3248 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][NOTICA 3248 ][none ][-1,-1,-1] ************************************************ 2025-05-25 20:32:05.380437 0.00% [WARNING] mod_gsmopen.cpp:1624 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][WARNINGA 1624 ][interface0][-1, 0, 0] STARTING interface_id=1 2025-05-25 20:32:05.380490 0.00% [DEBUG] mod_gsmopen.cpp:1625 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1625 ][interface0][-1, 0, 0] id=1 2025-05-25 20:32:05.380496 0.00% [DEBUG] mod_gsmopen.cpp:1626 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1626 ][interface0][-1, 0, 0] name=interface0 2025-05-25 20:32:05.380501 0.00% [DEBUG] mod_gsmopen.cpp:1627 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1627 ][interface0][-1, 0, 0] hold-music= 2025-05-25 20:32:05.380506 0.00% [DEBUG] mod_gsmopen.cpp:1628 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1628 ][interface0][-1, 0, 0] context=default 2025-05-25 20:32:05.380511 0.00% [DEBUG] mod_gsmopen.cpp:1629 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1629 ][interface0][-1, 0, 0] dialplan=XML 2025-05-25 20:32:05.380515 0.00% [DEBUG] mod_gsmopen.cpp:1630 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1630 ][interface0][-1, 0, 0] destination=5000 2025-05-25 20:32:05.380530 0.00% [DEBUG] mod_gsmopen.cpp:1631 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1631 ][interface0][-1, 0, 0] imei= 2025-05-25 20:32:05.380535 0.00% [DEBUG] mod_gsmopen.cpp:1632 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1632 ][interface0][-1, 0, 0] imsi= 2025-05-25 20:32:05.380542 0.00% [DEBUG] mod_gsmopen.cpp:1633 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1633 ][interface0][-1, 0, 0] controldevice_name=/dev/ttyUSB2 2025-05-25 20:32:05.380547 0.00% [DEBUG] mod_gsmopen.cpp:1634 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1634 ][interface0][-1, 0, 0] controldevice_audio_name=/dev/ttyUSB1 2025-05-25 20:32:05.380552 0.00% [DEBUG] mod_gsmopen.cpp:1635 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][DEBUG_GSMOPEN 1635 ][interface0][-1, 0, 0] gsmopen_serial_sync_period=300 2025-05-25 20:32:05.380570 0.00% [ERR] gsmopen_protocol.cpp:137 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][ERRORA 137 ][interface0][-1, 0, 0] port /dev/ttyUSB2, NOT open 2025-05-25 20:32:05.380576 0.00% [ERR] mod_gsmopen.cpp:1643 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][ERRORA 1643 ][interface0][-1, 0, 0] STARTING interface_id=1 FAILED: gsmopen_serial_init failed 2025-05-25 20:32:05.380585 0.00% [ERR] mod_gsmopen.cpp:2830 rev 1.10.12-release+git~20250113T174143Z~d8481a949d~64bit [(nil)|37 ][ERRORA 2830 ][interface0][-1, 0, 0] ALARM on interface interface0: |